Hi,

A quick question below...

> > -----Original Message-----
> > From: T.Sunil Kumar [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, May 17, 2001 9:14 AM
> > To: SIP implementors; Jonathan Rosenberg
> > Subject: www-authenticate header
> > 
> > 
> > Hi,
> > 
> > Should it be treated as 401 response header alone or request header
> > also?
> 
> It used to be both request and response, since we used to support
> authentication of responses by "mirroring" the request authentication
> mechanism. However, rfc2617 supports a mechanism for response 
> authentication
> that is now to be used instead. THerefore, WWW-AUthenticate 
> should just be a
> request header.
> 
> This will be reflected in the next rev.

This sounds good. Just for clarification, is this to say that the RFC 2617
style authentication-info headers will be added to the next SIP bis?

Thanks,
Aki
_______________________________________________
Sip-implementors mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to